ETK-2026-746Zero's internal tracking ID, independent of the CVE number.
waiting for further signalsZero needs more public information before it can validate it.description
Tari validator nodes and the RocksDB state-store path can abort when processing a sync-state request containing an out-of-range epoch. A remote peer able to open the validator P2P RPC substream can terminate the validator process without authentication, validator membership, or user interaction.
mitigation
Restrict validator P2P connectivity to trusted peers where operationally feasible, and filter or reject out-of-range sync-state epoch values before they reach the validator. Apply an upstream update that adds bounds checks for these epoch operations when one is released; no fixed version is recorded.
outcome
Contextual: an exploit technique exists, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-05 07:50Zghsa: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/ETK-2026-746
{ "etk_id": "ETK-2026-746", "cve_id": null, "display_id": "ETK-2026-746", "ghsa_id": "GHSA-6hvx-j552-fffj", "euvd_id": null, "status": "published", "anchor_state": "awaiting_cve", "title": "Integer overflow in tari_validator_node sync-state handling", "summary": "Tari validator nodes and the RocksDB state-store path can abort when processing a sync-state request containing an out-of-range epoch. A remote peer able to open the validator P2P RPC substream can terminate the validator process without authentication, validator membership, or user interaction.", "mitigation": "Restrict validator P2P connectivity to trusted peers where operationally feasible, and filter or reject out-of-range sync-state epoch values before they reach the validator. Apply an upstream update that adds bounds checks for these epoch operations when one is released; no fixed version is recorded.", "vendor": "rust", "product": "rust:tari_validator_node", "affected": [ { "affected_notes": [], "affected_ranges": [ "= 0.43.0" ], "ecosystem": "rust", "fixed_versions": [], "package_name": "tari_validator_node", "purl": "pkg:cargo/tari_validator_node" }, { "affected_notes": [], "affected_ranges": [ "= 0.43.0" ], "ecosystem": "rust", "fixed_versions": [], "package_name": "tari_ootle_state_store_rocksdb", "purl": "pkg:cargo/tari_ootle_state_store_rocksdb" } ], "cwes": [ 20 ], "cvss_score": 8.7, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 36.59252828333333, "t0_at": null, "signals": { "trigger_signal": { "at": "2026-10-05T07:50:43+00:00", "days": -15.875453634710649, "is_lower_bound": true, "measured_at": "2026-10-21T04:51:22.215980+00:00", "url": "https://github.com/tari-project/tari-ootle/security/advisories/GHSA-6hvx-j552-fffj" } } }
published 2026-10-06 08:30Z
last change 2026-10-21 04:45Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.